#jorijncom
LightNews LightNews
jorijn.toot.community.ap.brid.gy
Why I'm leaving GitHub for Forgejo

https://jorijn.com/en/blog/leaving-github-for-forgejo/

#GitHub #opensource #selfhosted #jorijncom
Why I'm leaving GitHub for Forgejo | Jorijn Schrijvershof
I left GitHub for self-hosted Forgejo on a hardened NUC. The reason is digital sovereignty, not reliability outages. Here's the thinking and the architecture.
jorijn.com
May 8, 2026 at 6:40 AM
jorijn.toot.community.ap.brid.gy
WordPress 7.0's real-time collaboration: what managed hosts need to prepare

https://jorijn.com/en/blog/wordpress-7-0-real-time-collaboration-hosting/

#WordPress #webhosting #webdev #jorijncom
WordPress 7.0's real-time collaboration: what managed hosts need to prepare | Jorijn Schrijvershof
WordPress 7.0 RTC changes the hosting load profile. HTTP polling, disabled post caches, and a new database table. What managed hosts need to prepare now.
jorijn.com
April 25, 2026 at 5:31 AM
jorijn.toot.community.ap.brid.gy
HashiCorp Vault vs OpenBao: a thorough comparison for platform teams

https://jorijn.com/en/blog/hashicorp-vault-vs-openbao/

#devops #security #opensource #jorijncom
HashiCorp Vault vs OpenBao: a thorough comparison for platform teams | Jorijn Schrijvershof
HashiCorp Vault vs OpenBao compared in depth: licensing, feature parity, namespaces, Enterprise gaps, migration paths, and how to pick one in 2026.
jorijn.com
April 29, 2026 at 2:25 PM
jorijn.toot.community.ap.brid.gy
WordPress Playground + MCP: AI coding agents meet a disposable WordPress environment

https://jorijn.com/en/blog/wordpress-playground-mcp-ai-coding-agents/

#WordPress #ai #webdev #jorijncom
WordPress Playground + MCP: AI coding agents meet a disposable WordPress environment | Jorijn Schrijvershof
WordPress Playground MCP connects AI coding agents to disposable WordPress instances. Setup guide, practical demo, honest limitations, and what it means for devs.
jorijn.com
April 27, 2026 at 7:02 AM
jorijn.toot.community.ap.brid.gy
Symfony at 20: what the quiet framework got right

https://jorijn.com/en/blog/symfony-at-20-what-the-quiet-framework-got-right/

#symfony #php #webdev #jorijncom
Symfony at 20: what the quiet framework got right | Jorijn Schrijvershof
Symfony's 20-year retrospective: how the component model, backward compatibility promise, and stability-over-hype philosophy shaped PHP's architecture layer.
jorijn.com
April 29, 2026 at 7:00 AM
jorijn.toot.community.ap.brid.gy
WordPress maintenance contract: what should it include?

https://jorijn.com/en/blog/wordpress-maintenance-contract/

#WordPress #webdev #websitemaintenance #jorijncom
WordPress maintenance contract: scope, costs, and pitfalls | Jorijn Schrijvershof
What should a WordPress maintenance contract include? Updates, backups, security, hosting, response time, extra work, costs, and cancellation terms explained.
jorijn.com
June 3, 2026 at 12:33 PM
jorijn.toot.community.ap.brid.gy
Why most Kubernetes backup strategies don't survive real disaster recovery

https://jorijn.com/en/blog/why-kubernetes-backup-strategies-dont-survive-disaster-recovery/

#kubernetes #devops #DisasterRecovery #jorijncom
Why most Kubernetes backup strategies don't survive real disaster recovery | Jorijn Schrijvershof
Velero restores break in predictable ways, KMS key rotation makes etcd snapshots unrestorable, and CSI snapshots aren't backups. What actually survives DR.
jorijn.com
May 16, 2026 at 1:35 PM
jorijn.toot.community.ap.brid.gy
The AI-crawler tax: who pays when bots are 57% of traffic

https://jorijn.com/en/blog/ai-crawler-tax-who-pays-when-bots-outnumber-humans/

#ai #seo #webdev #jorijncom
The AI-crawler tax: who pays when bots are 57% of traffic | Jorijn Schrijvershof
AI crawlers drive real bandwidth and compute cost, often billed as visits. How to rate-limit them without losing AI-search visibility, and who actually pays.
jorijn.com
June 16, 2026 at 9:30 AM
jorijn.toot.community.ap.brid.gy
Nextcloud is not a Google Workspace clone. That is the point and the trap.

https://jorijn.com/en/blog/nextcloud-not-google-workspace-clone/

#NextCloud #opensource #degoogle #jorijncom
Nextcloud is not a Google Workspace clone. That is the point and the trap. | Jorijn Schrijvershof
Nextcloud can replace files, calendar and parts of collaboration, but not Gmail, Vault or admin suites. A decision map for EU SMEs with email and ops limits.
jorijn.com
June 8, 2026 at 8:37 AM
jorijn.toot.community.ap.brid.gy
Air-gapped Kubernetes deployments: why Zarf wins

https://jorijn.com/en/blog/zarf-airgapped-kubernetes-delivery/

#kubernetes #devops #airgap #jorijncom
Air-gapped Kubernetes deployments: why Zarf wins | Jorijn Schrijvershof
Zarf bundles container images, Helm charts, and manifests for airgapped Kubernetes clusters. How its ConfigMap injection bootstraps a registry from nothing.
jorijn.com
May 27, 2026 at 7:48 AM
jorijn.toot.community.ap.brid.gy
Kyverno graduated: what CNCF top-level status means for Kubernetes policy

https://jorijn.com/en/blog/kyverno-cncf-graduation-kubernetes-policy/

#kubernetes #cloudnative #devops #jorijncom
Kyverno graduated: what CNCF top-level status means for Kubernetes policy | Jorijn Schrijvershof
Kyverno graduated to CNCF top-level in March 2026. What the graduation criteria mean, current adoption data, and practical implications for Kubernetes policy.
jorijn.com
April 15, 2026 at 7:00 AM
jorijn.toot.community.ap.brid.gy
Kyverno Chainsaw: declarative end-to-end testing for Kubernetes

https://jorijn.com/en/blog/kyverno-chainsaw-declarative-kubernetes-end-to-end-testing/

#kubernetes #devops #testing #jorijncom
Kyverno Chainsaw: declarative end-to-end testing for Kubernetes | Jorijn Schrijvershof
Kyverno Chainsaw is declarative YAML end-to-end testing for Kubernetes operators and Helm charts. What it does, who runs it in production, and its limits.
jorijn.com
June 2, 2026 at 10:50 AM
jorijn.toot.community.ap.brid.gy
Self-hosted email in 2026: harder than ever, more important than ever

https://jorijn.com/en/blog/self-hosted-email-2026/

#selfhosted #email #sysadmin #jorijncom
Self-hosted email in 2026: harder than ever, more important than ever | Jorijn Schrijvershof
Running your own mail server in 2026 means SPF, DKIM, DMARC, MTA-STS, TLS, reverse DNS, and sender reputation. Honest guide to when self-hosting makes sense.
jorijn.com
April 23, 2026 at 6:06 AM
jorijn.toot.community.ap.brid.gy
The Open Cloud Alliantie is real. Seven Dutch providers just made sovereignty a procurement conversation.

https://jorijn.com/en/blog/open-cloud-alliantie-dutch-sovereignty-procurement/

#digitalsovereignty #CloudComputing #Netherlands #jorijncom
The Open Cloud Alliantie is real. Seven Dutch providers just made sovereignty a procurement conversation. | Jorijn Schrijvershof
The Open Cloud Alliantie's real impact is procurement language. Seven Dutch providers, the DICTU sovereignty instrument, and how to evaluate sovereignty claims.
jorijn.com
May 18, 2026 at 7:13 AM
jorijn.toot.community.ap.brid.gy
copy.fail (CVE-2026-31431): a small Linux kernel bug with an unusually big blast radius

https://jorijn.com/en/blog/copy-fail-cve-2026-31431-linux-kernel-bug-explained/

#linux #cybersecurity #cve #jorijncom
copy.fail (CVE-2026-31431): a small Linux kernel bug with an unusually big blast radius | Jorijn Schrijvershof
copy.fail (CVE-2026-31431) explained: how a Linux kernel page-cache write turns any user into root, why it bypasses container isolation, and how to patch.
jorijn.com
April 30, 2026 at 12:30 PM
jorijn.toot.community.ap.brid.gy
The EU withdrawal button is now mandatory: what WooCommerce shops must do

https://jorijn.com/en/blog/eu-withdrawal-button-woocommerce/

#woocommerce #ecommerce #eu #jorijncom
The EU withdrawal button is now mandatory: what WooCommerce shops must do | Jorijn Schrijvershof
Since 19 June 2026, most EU B2C webshops need a withdrawal button for the 14-day cooling-off right. What WooCommerce shops must build or check.
jorijn.com
June 21, 2026 at 7:00 AM
jorijn.toot.community.ap.brid.gy
VictoriaMetrics vs Prometheus: my default, and when I still pick Prometheus

https://jorijn.com/en/blog/victoriametrics-vs-prometheus/

#monitoring #prometheus #observability #jorijncom
VictoriaMetrics vs Prometheus: my default, and when I still pick Prometheus | Jorijn Schrijvershof
Why VictoriaMetrics is my default over Prometheus: leaner RAM, simpler HA, boring operations, the independent evidence, and the cases where Prometheus still wins.
jorijn.com
June 17, 2026 at 11:22 AM
jorijn.toot.community.ap.brid.gy
GEO is still SEO: what Google actually said about AI search, llms.txt, and small business websites

https://jorijn.com/en/blog/geo-is-still-seo-ai-search-llms-txt-small-business-websites/

#seo #ai #smallbusiness #jorijncom
GEO is still SEO for AI search and small websites | Jorijn Schrijvershof
Google says GEO for AI Search still runs on SEO fundamentals. What small business WordPress sites should fix before chasing llms.txt, schema or AI tricks.
jorijn.com
June 8, 2026 at 8:37 AM
jorijn.toot.community.ap.brid.gy
WordPress 7.0 Put AI API Keys in the Admin. Treat That as an Operations Policy, Not a Feature Toggle.

https://jorijn.com/en/blog/wordpress-7-0-ai-api-keys-operations-policy/

#WordPress #ai #websecurity #jorijncom
WordPress 7.0 Put AI API Keys in the Admin. Treat That as an Operations Policy, Not a Feature Toggle. | Jorijn Schrijvershof
WordPress 7.0 turns AI API keys into site-level credentials. Set policy for connector keys, plugin access, billing, privacy, rotation and incident response.
jorijn.com
June 4, 2026 at 7:23 AM
jorijn.toot.community.ap.brid.gy
WordPress 7.0 ships the AI Client. The Abilities API and MCP Adapter are what plugin developers should learn first.

https://jorijn.com/en/blog/wordpress-7-0-abilities-mcp-plugin-developers-learn-first/

#WordPress #ai #webdev #jorijncom
WordPress 7.0 ships the AI Client. The Abilities API and MCP Adapter are what plugin developers should learn first. | Jorijn Schrijvershof
WordPress 7.0's AI Client gets the headlines. The Abilities API and MCP Adapter that shipped before it are what plugin developers should master first.
jorijn.com
May 21, 2026 at 7:00 AM
jorijn.toot.community.ap.brid.gy
Kubernetes 1.36 quietly buried one of the worst RBAC patterns in production

https://jorijn.com/en/blog/kubernetes-1-36-fine-grained-kubelet-authz-buries-nodes-proxy/

#kubernetes #security #devops #jorijncom
Kubernetes 1.36 quietly buried one of the worst RBAC patterns in production | Jorijn Schrijvershof
Kubernetes 1.36 made fine-grained kubelet API authorization GA. How nodes/proxy became a privilege-escalation primitive, what KEP-2862 changes, and how to migrate.
jorijn.com
May 13, 2026 at 1:18 PM
jorijn.toot.community.ap.brid.gy
FinOps for Kubernetes: when "it works" isn't enough

https://jorijn.com/en/blog/finops-for-kubernetes-when-it-works-isnt-enough/

#kubernetes #FinOps #devops #jorijncom
FinOps for Kubernetes: when "it works" isn't enough | Jorijn Schrijvershof
Kubernetes FinOps for small-to-mid clusters: where cost waste hides, EU cloud pricing vs hyperscalers, and practical tools like OpenCost and VPA to start today.
jorijn.com
April 21, 2026 at 6:02 AM
jorijn.toot.community.ap.brid.gy
OpenTofu vs Terraform in 2026: the fork finally diverged

https://jorijn.com/en/blog/opentofu-vs-terraform-2026-the-fork-finally-diverged/

#terraform #opentofu #InfrastructureasCode #jorijncom
OpenTofu vs Terraform in 2026: the fork finally diverged | Jorijn Schrijvershof
OpenTofu and Terraform diverged in code and governance. BSL vs. MPL-2.0 licensing, EU sovereignty, feature gaps, and migration realities compared for 2026.
jorijn.com
April 19, 2026 at 6:45 AM
jorijn.toot.community.ap.brid.gy
GitHub Actions agentic workflows: natural-language CI/CD meets reality

https://jorijn.com/en/blog/github-actions-agentic-workflows-natural-language-cicd/

#githubactions #devops #ai #jorijncom
GitHub Actions agentic workflows: natural-language CI/CD meets reality | Jorijn Schrijvershof
GitHub Actions agentic workflows let AI agents run CI/CD tasks from Markdown files. An honest look at the security model, use cases, and real-world limitations.
jorijn.com
April 17, 2026 at 6:45 AM
jorijn.toot.community.ap.brid.gy
User namespaces graduated stable in Kubernetes 1.36: pod-level isolation without gVisor

https://jorijn.com/en/blog/kubernetes-user-namespaces-pod-isolation-without-gvisor/

#kubernetes #devops #cloudnative #jorijncom
User namespaces graduated stable in Kubernetes 1.36: pod-level isolation without gVisor | Jorijn Schrijvershof
Kubernetes 1.36 makes user namespaces GA. How UID remapping isolates pods, what breaks, runtime requirements, and how it compares to gVisor and Kata Containers.
jorijn.com
April 14, 2026 at 10:54 AM